How to integrate own kms into Cosign and policy-controller admission controller?

[qiaozhi92]

Currently, we have developed own kms, and want to sign and verify signatures for container images using our kms.
How to integrate own kms into Cosign and policy-controller admission controller?
Is there any development documentation and guidance?
thanks！

[hectorj2f]

@qiaozhi92 Can you share more details about your own kms ? Is it vault compatible or any short of ? We only have support for few KMS services, as you can see here.

[qiaozhi92]

@hectorj2f We have developed key management service that support the creation of asymmetric keys, as well as functions such as signing and validating signatures through asymmetric keys.
Now, we want to sign the container image and verify signature using our own key management service，combined with Cosign and policy-controller admission controller.
Can you give us some guidance?
Thanks!